https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:07:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-36103 cnvd-2019-36103 https://cve.radiocsirt.org/vuln/cnvd-2019-36103 https://cve.radiocsirt.org/vuln/euvd-2026-53648 EUVD-2026-53648 https://cve.radiocsirt.org/vuln/euvd-2026-53648 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10432 <p>Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.</p> <p>Jenkins HTML Publisher Plugin 1.20 and earlier did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10432 https://cve.radiocsirt.org/vuln/ghsa-q829-hrmc-84c8 <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:htmlpublisher</p> <p>Jenkins HTML Publisher Plugin prior to version 1.21 did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those. This issue has been patched in version 1.21</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:htmlpublisher</p> <p>Jenkins HTML Publisher Plugin prior to version 1.21 did not escape the project and build display names in the HTML report frame, resulting in a cross-site scripting vulnerability exploitable by users able to change those. This issue has been patched in version 1.21</p> https://cve.radiocsirt.org/vuln/ghsa-q829-hrmc-84c8 https://cve.radiocsirt.org/vuln/gsd-2019-10432 gsd-2019-10432 https://cve.radiocsirt.org/vuln/gsd-2019-10432 https://cve.radiocsirt.org/vuln/rhsa-2019:4055 <p>jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of property names in property expressions on the left-hand side of assignment expression leads to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins: Stored XSS vulnerability in HTML Publisher Plugin</p> <p>jenkins-script-security-plugin: handling of method names in method call expressions allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of property names in property expressions on the left-hand side of assignment expression leads to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of property names in property expressions in increment and decrement expressions allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security-plugin: handling of subexpressions in increment and decrement expressions not involving actual assignment allowed attackers to execute arbitrary code in sandboxed scripts jenkins-script-security: Sandbox bypass vulnerability in Script Security Plugin jenkins-2-plugins: Stored XSS vulnerability in HTML Publisher Plugin</p> https://cve.radiocsirt.org/vuln/rhsa-2019:4055